
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/A3FBC4668A3511ECB4502D0DC4F9AE02.roa
File: A3FBC4668A3511ECB4502D0DC4F9AE02.roa (raw, json)
Hash identifier: wJwYPO+fwG1DzfXIB7tLWx4w4Z7LBKlhdGTpVmUtFJk=
Subject key identifier: C0:8A:57:90:25:13:C4:8F:A6:5C:7C:BF:30:CC:98:95:82:88:05:46
Certificate issuer: /CN=A9136429/serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24
Certificate serial: 0464
Authority key identifier: 98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/A3FBC4668A3511ECB4502D0DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:49:11 +0000
ROA not before: Tue 17 Feb 2026 00:20:43 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 149498
IP address blocks: 103.181.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl
rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:43:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1124 (0x464)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136429, serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24
Validity
Not Before: Feb 17 00:20:43 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a45ff7-1eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:db:63:c1:c3:49:fd:ee:2c:b9:f9:f3:dc:9d:
d3:b6:54:db:56:e2:51:85:c7:d7:39:65:ee:55:1c:
cc:41:bf:3b:77:20:e0:1d:d4:cf:16:be:a2:f5:14:
72:26:be:7b:a6:3b:8c:06:4d:6d:81:12:3c:b8:68:
0f:30:7c:b3:13:1a:66:b7:64:99:3e:d4:f1:ae:ec:
88:8d:81:ca:b1:ea:4f:a4:b1:c7:09:fc:3f:15:f4:
fa:99:79:40:3c:2b:b1:93:07:31:a9:03:77:bc:4a:
fc:40:05:03:a8:7b:04:be:e8:88:a1:b8:66:d4:e9:
d3:d7:c3:f0:46:4f:c3:37:7a:f3:61:4e:b7:d9:4d:
fc:45:e5:e2:f3:d5:6b:51:a3:40:c6:d6:0c:05:70:
43:93:8c:e5:84:ba:b3:51:60:82:b0:0e:aa:fe:4d:
c7:27:c0:80:90:18:96:16:07:61:33:2d:42:30:86:
b7:50:9d:c5:76:e4:f1:d3:0a:cb:a6:9e:f8:fb:e1:
8c:0d:e1:c7:c6:41:7d:ef:9f:45:33:1f:cb:82:fa:
00:23:ff:ae:46:34:40:05:0b:c6:bf:3f:fb:cb:52:
90:07:9d:cb:fd:ea:2c:95:0f:c6:19:16:87:cb:71:
1b:12:27:95:d5:e7:23:9a:fb:b6:a3:7c:d7:f3:0f:
fc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8A:57:90:25:13:C4:8F:A6:5C:7C:BF:30:CC:98:95:82:88:05:46
X509v3 Authority Key Identifier:
keyid:98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/A3FBC4668A3511ECB4502D0DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.181.68.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:da:df:ca:7b:4d:19:b0:e7:81:6e:d8:2f:2a:2b:bd:d3:80:
db:9a:0c:e8:84:22:5c:9c:e1:dd:39:36:01:5f:7c:84:42:f9:
87:a2:5d:16:00:88:77:eb:13:21:bb:ca:13:d5:02:b7:0e:1c:
90:11:0c:67:ad:90:2d:a8:aa:59:f7:97:42:d0:a2:69:61:de:
97:aa:d2:28:1c:bc:92:c2:3a:b4:47:7d:06:12:ed:37:4f:36:
33:e3:23:db:dc:3d:d3:a6:50:40:eb:d8:0f:75:3e:88:dd:46:
00:6e:01:b2:52:38:5f:6c:ae:f7:ef:e3:53:1c:77:a9:f2:95:
8a:8b:97:bd:4a:58:a5:d3:44:1a:ea:65:9b:7a:b4:7e:c3:85:
2e:7a:5f:70:2e:2c:a6:19:fe:41:e2:55:d8:9f:db:4e:4d:7d:
d0:7b:2a:91:78:3c:1f:80:4f:87:6e:28:e5:29:16:41:f3:4c:
e2:f2:62:60:16:d7:d6:a3:63:78:21:f5:b0:d5:67:22:dc:7d:
68:c3:8d:66:25:54:76:48:7c:e3:0d:e9:1d:10:a4:46:9f:ee:
6f:81:30:cb:b4:87:5c:9a:3f:0a:6f:89:8b:19:37:a6:86:38:
ea:ab:c9:aa:c3:95:bc:f3:d7:9a:c9:8c:c5:49:1c:3a:29:2c:
a7:5d:fc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:01:01 2026 by rpki-client